Is it possible to attack a payment gateway?

What option is used to be used in order to redirect the payment gateway into a malicious URL?